1 This file documents some of the problems you may encounter when upgrading
2 your ports. We try our best to minimize these disruptions, but sometimes
5 You should get into the habit of checking this file for changes each time
6 you update your ports collection, before attempting any port upgrades.
9 AFFECTS: users of lang/ruby22
10 AUTHOR: swills@FreeBSD.org
12 The default ruby version has been updated from 2.2 to 2.3.
14 If you compile your own ports you may keep 2.2 as the default version by
15 adding the following lines to your /etc/make.conf file:
18 # Keep ruby 2.2 as default version
20 DEFAULT_VERSIONS+=ruby=2.2
22 If you wish to update to the new default version, you need to first stop any
23 software that uses ruby. Then, you will need to follow these steps, depending
24 upon how you manage your system.
26 If you use pkgng, simply upgrade:
29 If you use portmaster, install new ruby, then rebuild all ports that depend
31 # portmaster -o lang/ruby23 lang/ruby22
32 # portmaster -R -r ruby-2.3
34 If you use portupgrade, install new ruby, then rebuild all ports that depend
37 # pkg delete -f ruby portupgrade
38 # make -C /usr/ports/ports-mgmt/portupgrade install clean
39 # pkg set -o lang/ruby22:lang/ruby23
40 # portupgrade -x ruby-2.3.\* -fr lang/ruby23
43 AFFECTS: multimedia/ffmpeg
44 AUTHOR: jbeich@FreeBSD.org
46 OPTIMIZED_CFLAGS switched to only use vendor optimizations which
47 means -ffast-math -fno-finite-math-only are no longer applied. If
48 you did like the former behavior consider adding
50 # multimedia/ffmpeg/Makefile.local
51 OPTIMIZED_CFLAGS_CFLAGS += -ffast-math -fno-finite-math-only
56 .if ${.CURDIR:M*/multimedia/ffmpeg}
57 CFLAGS += -ffast-math -fno-finite-math-only
61 AFFECTS: users of x11/xfce4-terminal
62 AUTHOR: olivierd@FreeBSD.org
64 The port has been updated to the latest stable version 0.8.2.
65 Please, don't active the hidden 'MiscSlimTabs' option in
66 ~/.config/xfce4/terminal/terminalrc, it requires Gtk+ > 3.20.
69 AFFECTS: users of multimedia/mlt
70 AUTHOR: avilla@FreeBSD.org
72 MLT Qt plugins have been moved to their own ports, mlt-qt4 and
73 mlt-qt5. Please, uninstall multimedia/mlt before you update:
78 AFFECTS: users of security/openvpn, security/openvpn-polarssl
79 AUTHOR: Matthias Andree <mandree@FreeBSD.org>
81 The OpenVPN ports have been updated to the new upstream release v2.4,
82 and their predecessors preserved as openvpn23 and openvpn23-polarssl,
83 respectively. Note that for the new v2.4 release, the
84 openvpn-polarssl port has been renamed to openvpn-mbedtls to match the
85 upstream library's new name.
88 AFFECTS: users of www/nghttp2
89 AUTHOR: sunpoet@FreeBSD.org
91 nghttp2 has been split into 2 ports: www/libnghttp2 for core library and
92 www/nghttp2 for the rest. Please uninstall nghttp2 before you update
96 AFFECTS: mail/thunderbird, www/seamonkey
97 AUTHOR: gecko@FreeBSD.org
99 ENIGMAIL is no longer provided as part of the ports after upstream
100 dropped binary components in 1.9. Go to Tools -> Add-ons Manager
101 then type "enigmail" in the search box to install.
104 AFFECTS: users of devel/skalibs, lang/execline, sysutils/s6
105 AUTHOR: Colin Booth <colin-ports@heliocat.net>
107 skalibs has undergone a major version bump and compatibility is not
108 guaranteed for software with a runtime dependency on
109 libskarnet.so.2.3.9.0. This will not affect lang/execline or
110 sysutils/s6 as those are statically linked against libskarnet.a.
112 execline has undergone a major version bump and compatibility is not
113 guaranteed for software with a runtime dependency on
114 libexecline.so.2.1.4.5. This will not affect sysutils/s6 as all s6
115 programs are statically linked against libexecline.a.
117 s6 has undergone a major version bump and compatibility is not
118 guaranteed for software with a runtime dependency on
119 libs6.so.2.2.4.3. Additionally, s6-applyuidgid and s6-setuidgid
120 have moved from $PREFIX/sbin to $PREFIX/bin. Any scripts calling
121 those utilities that are not relying on $PATH resolution to find
122 them will need to be rewritten.
125 AFFECTS: users of www/node
126 AUTHOR: bradleythughes@fastmail.fm
128 The www/node port has been updated to node.js v7.2.0, the latest
129 upstream release. A new port, www/node6, has been created for the
130 v6.x LTS branch. Users wanting to stay on v6.x can replace www/node
131 with www/node6 with one of the following commands:
133 # pkg set -o www/node:www/node6
135 # portmaster -o www/node6 www/node
137 # portupgrade -o www/node6 www/node
140 AFFECTS: Users of textproc/p5-Search-Elasticsearch
141 AUTHOR: tj@FreeBSD.org
143 As of the 5.01 release of ths package, the client libraries for older
144 versions of Elasticsearch have started to be shipped seperately. If you are
145 using this library to access a none 5.X server you will need to install one of
146 the textproc/p5-Search-Elasticsearch-Client-* ports.
149 AFFECTS: Users of security/gpgme-*
150 AUTHOR: jhale@FreeBSD.org
152 Gpgme has been updated to 1.8.0.
153 With it comes the removal of libgpgme-pthread.so in favor of using
154 libgpgme.so itself as the thread-safe library. Ports that may have
155 linked to -lgpgme-pthread will now just link to -lgpgme. PORTREVISION
156 has been bumped on all ports with a dependency on security/gpgme.
158 The Python module provided by security/py-gpgme has been renamed
159 from pyme3 to gpg, as well.
164 portupgrade -fr security/gpgme
167 AFFECTS: Users of graphics/tiff
168 AUTHOR: antoine@FreeBSD.org
170 The tiff port was updated to 4.0.7.
171 The following tools are removed from this release: bmp2tiff, gif2tiff, ras2tiff, rgb2ycbcr and thumbnail.
174 AFFECTS: Users of sysutils/bareos-*
175 AUTHOR: rand@iteris.com
177 Bareos v1.6.x changed the configuration scheme, from one configuration
178 file per Bareos component (file daemon, storage daemon, and director)
179 to several configuration files, in several directories, for each
180 component. See http://doc.bareos.org/master/html/bareos-manual-main-reference.html
182 The new scheme will use all files named *.conf in the directory
183 hierarchies for each component:
185 /usr/local/etc/bareos/bareos-dir.d/
186 /usr/local/etc/bareos/bareos-fd.d/
187 /usr/local/etc/bareos/bareos-sd.d/
189 To retain the old configuration scheme of one file per component add
190 appropriate lines such as these to your /etc/rc.conf:
192 bareos_dir_config="/usr/local/etc/bareos/bareos-dir.conf"
193 bareos_fd_config="/usr/local/etc/bareos/bareos-fd.conf"
194 bareos_sd_config="/usr/local/etc/bareos/bareos-sd.conf"
197 AFFECTS: users of devel/libosinfo
198 AUTHOR: novel@FreeBSD.org
200 The libosinfo port was separated into three different ports
201 to follow the upstream split:
203 - sysutils/osinfo-db-tools: contains the CLI tools
204 - misc/osinfo-db: contains database with OS data
205 - devel/libosinfo: the library
207 As osinfo-db-tools now ships binaries that previously were
208 part of libosinfo, it's required to delete the old libosinfo
209 package to prevent conflict because of same files installation:
211 # pkg delete libosinfo
213 And then install the new version.
216 AFFECTS: users of security/heimdal
217 AUTHOR: hrs@FreeBSD.org
219 Heimdal in the base system and security/heimdal <= 1.5.3_6 use
220 Berkeley DB to store principals into /var/heimdal/heimdal.db and
221 the database format is version 3 by default. On the other hand,
222 security/heimdal 1.5.3_7 or newer use the newer version of
223 Berkeley DB and the database format is version 9.
224 These two versions are not compatible with each other. If there is
225 a mismatch between Heimdal utilities and its database format,
226 you will get an error like the following:
228 # /usr/local/sbin/kadmin -l dump
229 BDB0641 __db_meta_setup: /var/heimdal/heimdal.db: unexpected file type or format
230 kadmin: hdb_open: opening /var/heimdal/heimdal: Invalid argument
232 This mismatch can occur in the following three cases:
234 1. You used Heimdal in the base system and switch to use security/heimdal
235 after creating /var/db/heimdal.db.
237 2. You used security/heimdal >= 1.5.3_7 and switch to use one in the
240 3. You used security/heimdal < 1.5.3_7 and upgrade it to 1.5.3_7 or later.
242 To fix this mismatch, you need to dump contents of heimdal.db and
243 rebuild the database by using kadmin(8) utility.
245 If you use Heimdal in the base system or older versions of
246 security/heimdal, and plan to switch to use
247 security/heimdal >= 1.5.3_7, execute the following command
248 *after* creating a backup copy of /var/heimdal and installing
251 # /usr/bin/kadmin -l dump /var/heimdal/heimdal.db.dump
252 # rm /var/heimdal/heimdal.db
253 # /usr/local/sbin/kadmin -l load /var/heimdal/heimdal.db.dump
254 # rm /var/heimdal/heimdal.db.dump
256 The above example assumes security/heimdal is installed into
257 /usr/local. If your base system is compiled with WITHOUT_KERBEROS
258 use the following instead:
260 # db_dump185-5 /var/heimdal/heimdal.db | db_load-5 /var/heimdal/heimdal.db.new
261 # chown 0600 /var/heimdal/heimdal.db.new
262 # mv /var/heimdal/heimdal.db.new /var/heimdal/heimdal.db
264 db_dump and db_load utilitites are installed by database/db5 as
265 dependency of security/heimdal.
267 If you want to switch from security/heimdal to Heimdal in the base
268 system, use the following:
270 # /usr/local/sbin/kadmin -l dump /var/heimdal/heimdal.db.dump
271 # rm /var/heimdal/heimdal.db
272 # /usr/bin/kadmin -l load /var/heimdal/heimdal.db.dump
273 # rm /var/heimdal/heimdal.db.dump
276 AFFECTS: users of security/heimdal
277 AUTHOR: hrs@FreeBSD.org
279 kadmin(8) in heimdal-1.5.3_5 and prior did not create a database
280 in /var/heimdal in Berkeley DB format which kdc(8) required. This
281 problem has been fixed in heimdal-1.5.3_6.
284 AFFECTS: users of mail/mu4e and mail/mu4e-maildirs
285 AUTHOR: hrs@FreeBSD.org
287 The package name of mail/mu4e* have been changed from mu4e* to
288 mu4e*-emacsNN. When upgrading the older versions, this change can
289 cause the following error which prevents it from upgrading:
291 pkg-static: mu4e-emacs25-0.9.16 conflicts with mu4e-0.9.16 (installs files into the same place).
293 If this error occurs, please remove the old packages by using
294 "pkg delete" manually:
296 # pkg delete mu4e-0.9.16 mu4e-maildirs-0.8.20160126_1
299 AFFECTS: users of lang/perl5*
300 AUTHOR: mat@FreeBSD.org
302 The default Perl version has been switched to Perl 5.24. If you are using
303 binary packages to upgrade your system, you do not have anything to do, pkg
304 upgrade will do the right thing. For the other people, assuming you are
305 migrating from 5.20 to 5.24, do:
307 First, add to /etc/make.conf:
309 DEFAULT_VERSIONS+= perl5=5.24
312 portupgrade -o lang/perl5.24 -f lang/perl5.20
314 You can now remove the DEFAULT_VERSIONS line added earlier
317 Then you will need to rebuild everything that uses libperl.so, you
320 portupgrade -f `pkg shlib -qR libperl.so.5.20`
323 portmaster -o lang/perl5.24 lang/perl5.20
325 You can now remove the DEFAULT_VERSIONS line added earlier
328 Then you will need to rebuild everything that uses libperl.so, you
331 portmaster -f `pkg shlib -qR libperl.so.5.20`
334 AFFECTS: users of security/acme-client
335 AUTHOR: brnrd@FreeBSD.org
337 The default configuration paths have changed from 'letsencrypt' to
338 'acme'. Rename the directories used accordingly
340 mv /usr/local/etc/letsencrypt /usr/local/etc/acme
341 mv /usr/local/etc/ssl/letsencrypt /usr/local/etc/ssl/acme
342 mv /usr/local/www/letsencrypt /usr/local/www/acme
344 Check your scripts to ensure proper operation.
347 AFFECTS: users of mail/squirrelmail
348 AUTHOR: adamw@FreeBSD.org
350 For better php70 support, the squirrelmail port has switched from
351 PEAR database access to PDO. If you are using squirrelmail with
352 a database backend, you'll need to install a corresponding PDO
353 database module, such as php56-pdo_sqlite.
356 AFFECTS: users of security/srm
357 AUTHOR: rakuco@FreeBSD.org
359 srm has been updated from 1.2.12 to 1.2.15. Since version 1.2.14,
360 srm defaults to using its "simple" mode to overwrite files (one pass
361 writing 0x00 to the files) instead of the 35-pass Gutmann method.
364 AFFECTS: users of irc/quassel
365 AUTHOR: woodsb02@freebsd.org
367 Quassel is now split into two ports / packages; one for providing
368 the server backend (irc/quassel-core), and one for providing the
369 client front-end (irc/quassel). Alternatively, the irc/quassel
370 port can be built with the MONO option enabled to also install
371 the client and server combined into a single monolithic binary.
374 AFFECTS: users of security/openssl and security/openssl-devel
375 AUTHOR: brnrd@freebsd.org
377 The shared library versions of OpenSSL have been bumped to avoid
378 issues with ports' and base's OpenSSL not being binary compatible.
380 Please rebuild all ports that depend on OpenSSL if you use OpenSSL
383 If you use portmaster:
384 portmaster -r openssl
385 If you use portupgrade:
386 portupgrade -fr security/openssl
389 AFFECTS: users of net-p2p/deluge
390 AUTHOR: rm@FreeBSD.org
392 Deluge port has been split out onto CLI part and GUI part. So if user
393 only needs deluged, net-p2p/deluge-cli should be installed. For full
394 deluge installation, including GTK+ GUI client, net-p2p/deluge should
395 be installed as a usual.
397 Old deluge package should be removed manually first:
401 After that install preferred deluge package as usual.
404 AFFECTS: users of x11/xfce4-terminal
405 AUTHOR: olivierd@FreeBSD.org
407 The port has been updated to the latest stable version 0.8.0.
408 A warning appears each time we open new tab:
410 Gtk-WARNING **: gtk_widget_size_allocate(): attempt to allocate
413 This issue will disappear with Gtk > 3.21.
416 AFFECTS: users of lang/python3
417 AUTHOR: antoine@FreeBSD.org
419 The default version of python3 has changed from 3.4 to 3.5.
420 If you wish to stick with older version, add "python3=3.4" to your
421 DEFAULT_VERSIONS variable in /etc/make.conf. To upgrade:
423 If using portupgrade:
424 # portupgrade -o lang/python35 lang/python34
427 # portmaster -o lang/python35 lang/python34
430 AFFECTS: Users of net-im/ejabberd
431 AUTHOR: ashish@FreeBSD.org
433 Before upgrading ejabberd to 16.09, please make sure to backup your
436 % sudo -u ejabberd -H ejabberdctl backup /path/to/backup/file
438 In some cases, ejabberd may fail to start, for which a workaround is to
439 remove the schema.DAT file from /var/spool/ejabberd before starting, and
440 then restoring everything from the backup using:
442 % sudo -u ejabberd -H ejabberdctl restore /path/to/backup/file
446 https://github.com/processone/ejabberd/issues/1305
449 AFFECTS: Users of audio/squeezeboxserver (now audio/logitechmediaserver)
450 AUTHOR: woodsb02@FreeBSD.org
452 With the rename of the audio/squeezeboxserver port to
453 audio/logitechmediaserver, the server and database are now installed in
454 different locations by default (/usr/local/share/logitechmediaserver and
455 /var/db/logitechmediaserver respectively).
457 If you were an existing user of audio/squeezeboxserver, you should
458 consider backing up you server configuration files and database before
459 upgrading to audio/logitechmediaserver. If you wish to override the
460 default locations for storing the server and database, you can set the
461 SLIMDIR and SLIMDBDIR variables in your /etc/make.conf when building
462 the audio/logitechmediaserver port.
465 AFFECTS: mail/roundcube-carddav
466 AUTHOR: gahr@FreeBSD.org
468 There is no upgrade path from the 1.0 version. You'll need to:
470 1. Log off from Roundcube.
471 2. Manually drop all carddav_* tables from your db backend.
472 3. Upgrade the mail/roundcube-carddav port.
474 The new tables will be created upon login. The CardDAV plugin will need to be
477 If you are running php < 7.0.0, you'll need to set the plugin option:
478 $prefs['_GLOBAL']['suppress_version_warning'] = true;
480 See https://github.com/blind-coder/rcmcarddav/issues/165 for details.
483 AFFECTS: emulators/ppsspp
484 AUTHOR: jbeich@FreeBSD.org
486 Qt* GUI was split into separate ports:
492 AFFECTS: sysutils/android-file-transfer
493 AUTHOR: jbeich@FreeBSD.org
495 Qt* GUI was split into separate ports:
497 sysutils/android-file-transfer-qt4
498 sysutils/android-file-transfer-qt5
501 AFFECTS: users of databases/pglogical, databases/pglogical-output
502 AUTHOR: matthew@FreeBSD.org
504 As of version 1.2.0, databases/pglogical-output has been merged into
505 databases/pglogical. portmaster or portupgrade users should delete
506 pglogical-output manually before upgrading.
509 AFFECTS: users of mail/sieve-connect
510 AUTHOR: alexey@renatasystems.org
512 Version 0.88 contains two breaking changes:
513 1. If the Sieve server does not offer STARTTLS, then connections should now
515 2. When deriving a remote script name from the local filename, use the
516 basename and strip off directories.
518 For additional information see:
519 http://mail.globnix.net/pipermail/sieve-connect-announce/2016/000012.html
522 AFFECTS: users of net/vtun
523 AUTHOR: cy@FreeBSD.org
525 The VTUN_EXTENDED_MODE option has been replaced by -e command line
529 AFFECTS: users of www/nginx-devel
530 AUTHOR: osa@FreeBSD.org
532 Nginx now creates logs under /var/log/nginx/ and changes default log
533 names from "nginx-access.log" and "nginx-error.log" to "access.log" and
534 "error.log" respectively. This is important for the error log because
535 the location is encoded and touched by nginx during startup regardless
536 of the configured location for the error log.
538 See http://trac.nginx.org/nginx/ticket/147 for additional information
542 AFFECTS: users of deskutils/xfce4-volumed-pulse
543 AUTHOR: olivierd@FreeBSD.org
545 The port has been updated to the latest stable version 0.2.2.
546 Support of xfce4-mixer has been removed, so you can delete
547 its properties with the following command:
549 xfconf-query -c xfce4-mixer -p / -rR
552 AFFECTS: users of security/letsencrypt.sh
553 AUTHOR: riggs@FreeBSD.org
555 The config filename has been changed upstream from "config.sh"
556 to "config". Users must rename the current config file manually.
557 In addition, the default WELLKNOWN location has been changed to
558 %%PREFIX%%/www/letsencrypt. In order to use the previous default
559 location, the config file must be updated manually as well.
562 AFFECTS: users of math/galculator
563 AUTHOR: woodsb02@FreeBSD.org
565 galculator now uses GTK3 by default. An option exists in the port to revert
569 AFFECTS: uses of www/nginx
570 AUTHOR: marino@FreeBSD.org
572 Nginx now creates logs under /var/log/nginx/ and changes default log
573 names from "nginx-access.log" and "nginx-error.log" to "access.log" and
574 "error.log" respectively. This is important for the error log because
575 the location is encoded and touched by nginx during startup regardless
576 of the configured location for the error log.
578 See http://trac.nginx.org/nginx/ticket/147 for additional information
582 AFFECTS: users of databases/postgresql96-server
583 AUTHOR: girgen@FreeBSD.org
585 The default unix user used by the PostgreSQL daemon has changed to
586 `postgres' to reflect the long time upstream's convention. Any scripts
587 you have using the old `pgsql' unix user should be modified when upgrading to
588 PostgreSQL version 9.6. Older versions of PostgreSQL will continue using
589 `pgsql' until their end-of-life.
591 For users with UTF-8 locales in the database: The ICU patch is *activated by
592 default* for the PostgreSQL-9.6 server. For previous versions it was optional
593 and default off, but this has changed. Please read the entry here below from
594 20160811 and understand the consequences of changing between ICU and system
595 locale for database collation (short version: don't). pg_upgrade requires the
596 collation method to be the same (or a reindex), while pg_dump/restore does not.
598 Also, the default home directory for the postgres user is now
599 /var/db/postgres, and the default data directory for PostgreSQL 9.6 is
600 /var/db/postgres/data96.
603 AFFECTS: users of x11/nvidia-driver
604 AUTHOR: cem@FreeBSD.org
606 The NVidia driver has been updated to version 367.35. Starting with
607 version 358.09, new kernel module was added, nvidia-modeset.ko. This
608 new driver component works in conjunction with the nvidia.ko kernel
609 module to program the display engine of the GPU.
611 Users that experience hangs when starting X11 server, or observe
613 (II) NVIDIA(0): Validated MetaModes:
614 (II) NVIDIA(0): "NULL"
616 messages in their /var/log/Xorg.0.log file should replace ``nvidia''
617 with ``nvidia-modeset'' in /boot/loader.conf or /etc/rc.conf files,
618 depending on how they prefer to load NVidia driver kernel module.
621 AFFECTS: users of security/sshguard
622 AUTHOR: feld@FreeBSD.org
624 Sshguard has been updated to 1.7.0. There have been several changes to
625 this release. Notably the hosts and ipfilter backends are no longer
626 supported. If you need these backends to be supported and you missed
627 the survey sent out by upstream I urge you to contact upstream.
629 The hosts backend was previously served by security/sshguard directly.
630 The additional backends were slave ports with package name suffixes. I
631 have opted to keep the master/slave port relationship but not choose a
632 specific backend for security/sshguard. Instead it is now a metaport
633 which will prompt you for which backend you prefer. If no backend is
634 configured it will depend on security/sshguard-ipfw, which is the
635 native FreeBSD firewall. This my be surprising to users who depended
636 on security/sshguard which only provided hosts/TCP Wrappers blocking,
637 but there is no replacement at this time.
639 I would also like to document that sshguard no longer accepts the -e
640 argument which allowed external scripts to run when sshguard finds a
641 match. As a result the null backend can no longer be used to create
642 custom blocking functionality; it only serves as a detection backend.
644 If the removed backends return due to user demand they will be added
645 as slave ports for consistency. I apologize for any inconvenience and
646 lack of notice on the deprecation of these features.
649 AFFECTS: users of mail/rspamd*
650 AUTHOR: vsevolod@FreeBSD.org
652 Rspamd users should update Rspamd to 1.3.3 version as soon as possible
653 and ensure that '/usr/local/etc/rspamd/module.d/fuzzy_check.conf` has
654 the line `algorithm = "mumhash";` for the "rspamd.com" rule. The more
655 detailed information could be found on
656 https://rspamd.com/announce/2016/08/15/rspamd-1.3.3.html
659 AFFECTS: users of dns/powerdns*
660 AUTHOR: junovitch@FreeBSD.org
662 PowerDNS Authoritative Server and Recursor 4.0.0+ introduce significant
663 changes to the configuration files, which need to be handled before
664 restarting the services. As from the Recursor changelog, "The Lua hook
665 infrastructure was redone using LuaWrapper; old scripts will no longer
666 work, but new scripts are easier to write under the new interface."
669 AFFECTS: users of security/libressl
670 AUTHOR: brnrd@FreeBSD.org
672 The port has been updated to the latest stable version 2.4 of LibreSSL.
673 The shared library versions of the libraries have been bumped.
674 With this update, the patch for the OPENSSL_VERSION_NUMBER has been
675 removed. This causes issues with a number of ports. Patches for all
676 ports for which this issues is known can be found on
677 https://wiki.freebsd.org/LibreSSL/Ports#OPENSSL_VERSION_NUMBER
679 After upgrading, manually update all packages that depend on any of the
680 libraries provided by LibreSSL (libssl, libcrypto and libtls) since the
681 versions of these libraries have changed. Normally, you can obtain the
682 list of dependent software by running the following command:
684 # pkg info -r libressl
686 Then you should rebuild all ports depending on libressl to avoid dangling
687 shared library dependencies. Poudriere and pkg handle this correctly,
688 portmaster and portupgrade users can use the following to rebuild all
692 portmaster -r libressl
694 portupgrade -fr security/libressl
697 AFFECTS: users of databases/postgresqlNN-server with ICU patch
698 AUTHOR: girgen@FreeBSD.org
700 The ICU patch is added to the PostgreSQL-9.5 server. Please note that you
701 must never change between using the ICU patch and using system locale for
702 the same database cluster without REINDEXing all TEXT/VARCHAR columns, or
703 dump and restore your database. Failing to do so will result in corrupted
704 indexes due to the differences between the locale definitions. ICU will
705 always be the better choice for speed and correctness.
707 Also, the ICU patch used to support other Unicode encodings than UTF-8,
708 but that has been removed due to lack of demand and the complicated testing
709 required. If you use another Unicode encoding and rely on ICU for collation,
710 please refrain from upgrading the postgresql server and instead contact the
714 AFFECTS: users of emulators/virtualbox-ose
715 AUTHOR: jkim@FreeBSD.org
717 VirtualBox has been updated to 5.0.26 and it is incompatible with old
718 kernel modules. You should upgrade emulators/virtualbox-ose-kmod and
719 load new kernel modules before starting new version, e.g.,
721 # service vboxnet restart
724 AFFECTS: users of games/stonesoup-*
725 AUTHOR: lifanov@mail.lifanov.com
727 The WIZARD option has been renamed to NOWIZARD and is now an opt-out to
728 better reflect the upstream. If you run a shared game server and would
729 like the Wizard mode support disabled, please update port options.
732 AFFECTS: users of www/awstats
733 AUTHOR: adamw@FreeBSD.org
735 The directory containing icons has changed from ".../icons" to ".../icon".
736 awstats has, in its suggested configuration file, contained an alias
737 from /awstatsicons. After applying the awstats-7.5 update, you must
738 update that alias to point to /usr/local/www/awstats/icon (just remove
742 AFFECTS: users of sysutils/screen
743 AUTHOR: cy@FreeBSD.org
745 GNU Screen was updated to version 4.4.0 (r417201). Note that there was
746 fix to screen message structure field responsible for $TERM handling,
747 making it impossible to attach to older versions.
750 AFFECTS: users of databases/mysql57-*
751 AUTHOR: riggs@FreeBSD.org
753 The default location for my.cnf has changed from "/var/db/mysql/my.cnf"
754 to "/usr/local/etc/mysql/my.cnf". Existing my.cnf files must be merged
755 manually with the new default and moved to the new location. To
756 continue using the my.cnf file at the old location, set "mysql_optfile"
757 in /etc/rc.conf to point to the location of the existing my.cnf file.
760 AFFECTS: users of www/node5
761 AUTHOR: bradleythughes@fastmail.fm
763 Node.js v5.x has reached end of life and has been removed. Users that
764 have not yet moved to v6.x should do so now by switching to the www/node
768 AFFECTS: users of sysutils/rsyslog7
769 AUTHOR: brd@FreeBSD.org
771 Rsyslog 7.x has reached end of life status and is being marked as
772 depreciated. Rsyslog 8 has been made the default.
775 AFFECTS: users of www/calendarserver
776 AUTHOR: pi@FreeBSD.org
778 Please note that updating from the previous version (5.1) to the current
779 version (8.0) requires manual steps. Please consult the pkg-message for
783 AFFECTS: users of shells/zsh
784 AUTHOR: adamw@FreeBSD.org
786 zsh now looks for system-wide conf files in ${PREFIX}/etc, instead of
787 /etc. If you have files like zshrc, zshenv, zprofile, zlogin, or zlogout
788 in /etc, either move them to /usr/local/etc or rebuild zsh with the
791 Note that this change only affects system-wide conf files, which are not
792 installed or created by a default installation.
795 AFFECTS: users of www/redmine
796 AUTHOR: tz@FreeBSD.org
798 Redmine was updated from 2.6.9 to 3.2.3. Since this an update over
799 major versions be careful with your update.
800 For further update instructions please have a look at:
801 https://www.redmine.org/projects/redmine/wiki/RedmineUpgrade
804 AFFECTS: users of ftp/wget
805 AUTHOR: vd@FreeBSD.org
807 Wget 1.18 fixes a security vulnerability (CVE-2016-4971) and the fix
808 introduces a backward-incompatibility for HTTP->FTP redirects. Any script that
809 relies on the old behaviour must use --trust-server-names in order to trust
810 the HTTP response and redirect to the new filename.
813 AFFECTS: users of databases/py-apsw
814 AUTHOR: rm@FreeBSD.org
816 SQLite 3.12 completely changed the semantics of VFS.xGetLastError() in an
817 incompatible way. This required a rewrite of the relevant C, Python and test
818 code. If you implement or use this method then you have to rewrite your code
819 too. Also note that running the test suite from an earlier version of APSW
820 against this or future SQLite versions will result in consuming all memory,
821 swap or address space (an underlying integer changed meaning).
824 AFFECTS: users of security/openssl*, security/libressl*
825 AUTHOR: mat@FreeBSD.org
827 Previously, to tell the ports tree, you needed to set:
829 WITH_OPENSSL_PORT=yes
831 And if you wanted a port that was not security/openssl, you needed to add,
834 OPENSSL_PORT= security/libressl
836 Now, all you need to do is:
838 DEFAULT_VERSIONS+= ssl=libressl
840 Valid values are base, openssl, openssl-devel, libressl, and libressl-devel.
843 AFFECTS: users of www/node, www/node5, and www/node4
844 AUTHOR: adamw@FreeBSD.org
846 node now prefers a few libraries from ports to the versions bundled
847 with node. However, node cannot use the libssl from LibreSSL. If you
848 are using LibreSSL as your SSL provider, you must enable the
849 "BUNDLED_SSL" option when building node.
852 AFFECTS: users of textproc/xmlroff
853 AUTHOR: hrs@FreeBSD.org
855 The library part of xmlroff has been separated into textproc/libfo.
856 Remove the installed xmlroff first when upgrading it because older
857 xmlroff than 0.6.2_6 have files which libfo installs. A typical
858 error message is the following:
860 pkg-static: libfo-0.6.2 conflicts with xmlroff-0.6.2_5 (installs files into the same place). Problematic file: /usr/local/include/libfo-0.6/libfo/area/fo-area.h
863 AFFECTS: users of databases/postgresql-repmgr
864 AUTHOR: bofh@FreeBSD.org
866 The port has been repocopied to databases/postgresql-repmgr2 and current
867 post has been updated to 3.x series. If anyone is still looking forward
868 to use the 2.x please upgrade as following.
870 # portmaster -o databases/postgresql-repmgr2 databases/postgresql-repmgr
872 # portupgrade -o databases/postgresql-repmgr2 databases/postgresql-repmgr
874 Otherwise if you want to move on with 3.x series just use
876 # portmaster -r databases/postgresql-repmgr
878 # portupgrade -fr databases/postgresql-repmgr
881 AFFECTS: users of www/h2o
882 AUTHOR: junovitch@FreeBSD.org
884 File paths no longer have a trailing / appended to them. This enables
885 directing specific paths to a file but may break existing configurations.
886 Refer to https://h2o.examp1e.net/configure/file_directives.html and
887 revise your yaml config appropriately.
890 AFFECTS: users of security/libressl-devel
891 AUTHOR: brnrd@FreeBSD.org
893 The port has been updated to the latest "unstable" version of LibreSSL.
894 The shared library versions of the libraries have been bumped.
895 With this update, the patch for the OPENSSL_VERSION_NUMBER has been
896 removed. This causes issues with a number of ports. Patches for many of
897 these issues can be found on
898 https://wiki.freebsd.org/LibreSSL/Ports#OPENSSL_VERSION_NUMBER
900 After upgrading to 2.4.0, manually update all packages that depend on
901 any of the libraries provided by LibreSSL (libssl, libcrypto and
902 libtls) since the versions of these libraries have changed. Normally,
903 you can obtain the list of dependent software by running the following
906 # pkg info -r libressl-devel
908 Then you should rebuild all ports depending on libressl-devel to avoid
909 dangling shared library dependencies. Poudriere and pkg handle this
910 correctly, portmaster and portupgrade users can use the following to
911 rebuild all dependent ports.
914 portmaster -r libressl-devel
916 portupgrade -fr security/libressl-devel
919 AFFECTS: users of mail/opensmtpd-extras (any of them)
920 AUTHOR: adamw@FreeBSD.org
922 The invocation for extras has changed. Some extras might fail unless
923 you pass all options/arguments separated by quotes:
925 filter myfilter dnsbl "-c /var/chroot/dnsbl" "-h my.dnsbl.com"
927 Additionally, extras now run in a chroot. Either pass "-C" to skip the
928 chroot entirely (not recommended), or put all required config files,
929 resolv.conf, and external binaries into the chroot. For example:
931 # mkdir -p /var/chroot/dnsbl/etc
932 # cp /etc/resolv.conf /var/chroot/dnsbl/etc
934 And pass "-c /var/chroot/dnsbl" to the filter.
937 AFFECTS: users of mail/opensmtpd
938 AUTHOR: brnrd@FreeBSD.org
940 Due to changes to the rc-script you must stop smtpd prior to upgrading
941 mail/opensmtpd to version 5.9.2
945 Then upgrade OpenSMTPD to version 5.9.2.
946 Additionally version 5.9.2 changes the file mode bits for two directories.
947 To allow existing installations to start successfully you must apply the
950 # chown -R root:_smtpq /var/spool/smtpd/offline
951 # chmod -R 770 /var/spool/smtpd/offline
952 # chmod -R 700 /var/spool/smtpd/purge
954 After applying the changes, the smtpd daemon can successfully be started.
957 AFFECTS: users of devel/qtcreator
958 AUTHOR: nolden@kde.org
960 QBS (Qt Build System) was previously shipped as part of qtcreator, now
961 it is independently available as devel/qbs. However, on upgrading
962 qtcreator to 3.6.1, the depends will detect qbs through a previously
963 installed qtcreator port and will not build/install correctly
964 (devel/qbs won't be installed automatically as depends)
966 The solution is to pkg remove qtcreator, then building works correctly.
969 AFFECTS: users of databases/db6
970 AUTHOR: mandree@FreeBSD.org
972 The databases/db6 port has been updated to release 6.2.23.
974 This requires manual action in two places:
975 1. dependent applications need to be recompiled,
976 2. SQL databases, if any, need to be reindexed.
978 To obtain a list of ports needing a recompilation,
979 the following command should provide it:
983 Then rebuild db6 and the dependent ports. For pkg users, this should
987 # portmaster -r databases/db6
989 # portupgrade -fr databases/db6
991 In order to reindex SQL databases, a db6-upgrade61.sh script is
992 provided in ${PREFIX}/bin, if and only if the port's SQL option is
993 enabled. For detailed reindexing instructions, see
994 http://docs.oracle.com/cd/E17076_05/html/installation/sqlite_ver61.html
995 and note that the FreeBSD port installs the upgrade61.sh script with a
996 db6- prefix that you need to add.
999 AFFECTS: users of audio/clementine-player
1000 AUTHOR: sbruno@FreeBSD.org
1002 The audio/clementine-player port has been updated to v1.3.1, the latest
1003 upstream release. The music database code now has a hard dependency on
1004 databases/sqlite having the FTS3_TOKENIZER option enabled. This has
1005 been made the default option in databases/sqlite.
1007 Without this option, clementine-player will crash on startup.
1010 AFFECTS: users of biology/seqan
1011 AUTHOR: junovitch@FreeBSD.org
1013 The biology/seqan port has been split into biology/seqan (only the
1014 library) and biology/seqan-apps for the programs based on SeqAn. Both
1015 ports are based on version 2.1.1 of the SeqAn repository. There is a new
1016 biology/seqan1 port with version 1.3 of SeqAn for backwards compatibility,
1017 but this port will likely be deprecated in the next year so please update
1018 your software to SeqAn2.
1021 AFFECTS: users of www/node
1022 AUTHOR: bradleythughes@fastmail.fm
1024 The www/node port has been updated to node.js v6.0.0, the latest
1025 upstream release. Users of node.js v5.x are encouraged to upgrade as
1026 soon as possible, as upstream support will end two months from now.
1028 The www/node5 port has been created to aid users transition. Use one of
1029 the following commands to continue using node.js v5.x:
1033 # portmaster -o www/node5 www/node
1035 # portupgrade -o www/node5 www/node
1038 AFFECTS: users of security/libressl
1039 AUTHOR: brnrd@FreeBSD.org
1041 LibreSSL 2.3 has removed SSLv3 support completely which leads to issues
1042 with a number of ports. Patches for many of these issues can be found
1043 on https://wiki.freebsd.org/OpenSSL/No-SSLv3
1045 After upgrading to 2.3.4, manually update all packages that depend on
1046 any of the libraries provided by LibreSSL (libssl, libcrypto and
1047 libtls) since the versions of these libraries have changed. Normally,
1048 you can obtain the list of dependent software by running the following
1051 # pkg info -r libressl
1053 Then you should rebuild all ports depending on libressl to avoid dangling
1054 shared library dependencies. Poudriere and pkg handle this correctly,
1055 portmaster and portupgrade users can use the following to rebuild all
1059 portmaster -r libressl
1061 portupgrade -fr security/libressl
1064 AFFECTS: users of mail/dspam
1065 AUTHOR: junovitch@FreeBSD.org
1067 dspam has been modified to no longer run as root:mail by default.
1068 Existing configuration must be adjusted to reflect using a non-privileged
1069 port and the /var/run/dspam directory for PID and socket files. If you
1070 need dspam to run as root for your mail setup, you can use the SETUID
1071 config option to enable the old insecure behavior.
1074 AFFECTS: users of www/nginx and www/nginx-devel
1075 AUTHOR: osa@FreeBSD.org
1077 The ${MODULESDIR}, default directory for dynamic modules, has been
1078 changed from ${ETCDIR}/modules to ${PREFIX}/libexec/${PORTNAME}.
1079 It's highly recommended to review existing configuration files of
1080 nginx, i.e. ${PREFIX}/etc/nginx/nginx.conf.
1083 AFFECTS: users of net-mgmt/icinga2
1084 AUTHOR: lme@FreeBSD.org
1086 The creation of Icinga2 directories and files in /var is now controlled
1087 by the /etc/rc.conf variable icinga2_mkvar. Earlier ports always
1088 created the /var entries, but could slow startup significantly when /var
1089 was a normal disk rather than a RAM disk. icinga2_mkvar defaults to
1093 AFFECTS: users of audio/chromaprint
1094 AUTHOR: jhale@FreeBSD.org
1096 chromaprint has been updated to version 1.3.1 and includes a shared
1097 library bump. PORTREVISIONS have been bumped on affected ports.
1098 If you are using binary pkg, 'pkg upgrade' will do the right thing.
1099 Users of portmaster/portupgrade must rebuild all ports which depend
1103 portmaster -w -r chromaprint
1105 portupgrade -fr audio/chromaprint
1108 AFFECTS: users of www/tt-rss
1109 AUTHOR: thierry@FreeBSD.org
1111 Tiny Tiny RSS can use a database running on a separate server.
1112 Previously, in this case, you had to set the option DBLOCAL; this option
1113 has been removed and replaced by a settable run-time flag: now you
1115 ttrssd_local_db="NO"
1116 in your /etc/rc.conf .
1119 AFFECTS: users of graphics/kipi-plugin-googledrive and graphics/kipi-plugin-picasaweb
1120 AUTHOR: kde@FreeBSD.org
1122 DigiKam and its related ports have been updated to 4.14.0, the latest
1123 stable upstream release.
1125 The graphics/kipi-plugin-googledrive and graphics/kipi-plugin-picasaweb
1126 have both been merged into the new graphics/kipi-plugin-googleservices
1127 following a move done upstream.
1129 Those two ports must be removed, and graphics/kipi-plugin-googleservices
1130 should be used instead.
1133 AFFECTS: users of www/node-devel
1134 AUTHOR: bradleythughes@fastmail.fm
1136 www/node-devel was outdated and has been removed. Upstream no longer
1137 releases a development version. You can use the www/node port to get
1138 node.js 5.x by running one of the following commands:
1142 # portmaster -o www/node www/node-devel
1144 # portupgrade -o www/node www/node-devel
1147 AFFECTS: multimedia/x264
1148 AUTHOR: jbeich@FreeBSD.org
1150 LSMASH replaced GPAC by default. If you use BATCH=y in /etc/make.conf
1151 and hit below error make sure to re-run "make config".
1153 ====> You cannot select multiple options from the MP4 radio
1157 AFFECTS: users of net/samba42 and net/samba/43
1158 AUTHOR: timur@FreeBSD.org
1160 Samba 4.2.x and 4.3.x ports have been updated to address
1161 BadLock(http://badlock.org) vulnerability, as well as few other
1164 Please note that Samba 4.1.x and older versions are also affected by
1165 the issues fixed with this release but are not supported anymore. It is
1166 strongly recommend to upgrade to a recent version at your earliest
1169 The security updates include new smb.conf options and a number of
1170 stricter behaviours to prevent Man in the Middle attacks. Between these
1171 changes, compatibility with a large number of older software versions
1172 has been lost in the default configuration.
1174 For more information about the related behaviour changes and the
1175 security issues please visit:
1177 https://www.samba.org/samba/latest_news.html#4.4.2
1178 https://www.samba.org/samba/history/samba-4.3.8.html
1179 https://www.samba.org/samba/history/samba-4.2.11.html
1182 AFFECTS: users of databases/influxdb
1183 AUTHOR: cheffo@freebsd-bg.org
1185 To upgrade to InfluxDB 0.12, you must be on version 0.10 and all shards must
1186 be in TSM format (the default storage engine starting with InfluxDB 0.10).
1187 See the 0.10 documentation [1] for how to convert b1 and bz1 shards to TSM. If
1188 any b1 or bz1 shards are present, InfluxDB 0.12 will not start.
1190 Next, you need to update your metastore *before updating to 0.12.* [2]
1192 [1] https://docs.influxdata.com/influxdb/v0.10/administration/upgrading/#convert-b1-and-bz1-shards-to-tsm1
1193 [2] https://docs.influxdata.com/influxdb/v0.12/administration/upgrading/
1196 AFFECTS: users of www/pecl-http
1197 AUTHOR: bofh@FreeBSD.org
1199 www/pecl-http has been updated to the latest 3.x stable release, which
1200 supports php70+ and a new port www/pecl-http2 has been created for the
1203 Should users want to continue to use version 2.x, replace www/pecl-http with
1204 www/pecl-http2 as follows:
1208 # pkg delete pecl-http
1209 # pkg install pecl-http2
1213 # portupgrade -o www/pecl-http2 www/pecl-http
1217 # portmaster -o www/pecl-http2 www/pecl-http
1220 AFFECTS: users of lang/ruby21
1221 AUTHOR: swills@FreeBSD.org
1223 The default ruby version has been updated from 2.1 to 2.2.
1225 If you compile your own ports you may keep 2.1 as the default version by
1226 adding the following lines to your /etc/make.conf file:
1229 # Keep ruby 2.1 as default version
1231 DEFAULT_VERSIONS+=ruby=2.1
1233 If you wish to update to the new default version, you need to first stop any
1234 software that uses ruby. Then, you will need to follow these steps, depending
1235 upon how you manage your system.
1237 If you use pkgng, simply upgrade:
1240 If you use portmaster, install new ruby, then rebuild all ports that depend
1242 # portmaster -o lang/ruby22 lang/ruby21
1243 # portmaster -R -r ruby-2.2
1245 If you use portupgrade, install new ruby, then rebuild all ports that depend
1248 # pkg delete -f ruby portupgrade
1249 # make -C /usr/ports/ports-mgmt/portupgrade install clean
1250 # pkg set -o lang/ruby21:lang/ruby22
1251 # portupgrade -x ruby-2.2.\* -fr lang/ruby22
1254 AFFECTS: mail/spamassassin
1255 AUTHOR: adamw@FreeBSD.org
1257 Support for SSLv3 has been removed from SpamAssassin, because
1258 SSLv3 is a Bad Idea. No direct option is provided to re-enable it.
1259 If your setup requires use of SSLv3, some instructions are available
1260 in FreeBSD PR 208225.
1263 AFFECTS: security/clamav-unofficial-sigs
1264 AUTHOR: lukasz@wasikowski.net, sf@maxempire.com
1266 This version of clamav-unofficial-sigs is eXtremeSHOK's fork.
1267 Configuration file location has changed from
1268 %PREFIX%/clamav-unofficial-sigs.conf to
1269 %PREFIX%/clamav-unofficial-sigs/
1271 master.conf and os.conf hold default values, local changes should
1272 be placed in user.conf.
1275 AFFECTS: print/ghostscript9-base
1276 AUTHOR: tijl@FreeBSD.org
1278 The default Ghostscript port has changed from print/ghostscript9-base,
1279 which is no longer developed, to print/ghostscript9-agpl-base. Package
1280 users will upgrade automatically. Ports users can stick with the old
1281 port by adding "DEFAULT_VERSIONS+=ghostscript=9" to /etc/make.conf, or
1282 move to the new port with:
1284 portmaster -o print/ghostscript9-agpl-base ghostscript9-base
1285 or: portupgrade -o print/ghostscript9-agpl-base print/ghostscript9-base
1287 And if you have ghostscript9-x11 installed:
1289 portmaster -o print/ghostscript9-agpl-x11 ghostscript9-x11
1290 or: portupgrade -o print/ghostscript9-agpl-x11 print/ghostscript9-x11
1292 Note that print/ghostscript9-agpl-base is licensed under the AGPLv3
1293 while print/ghostscript9-base is licensed under the GPLv3.
1296 AFFECTS: security/openvas-client
1297 AUTHOR: tijl@FreeBSD.org
1299 The OpenVAS ports have been updated from version 2 to version 8. All
1300 components have been renamed and rearranged. The old OpenVAS client
1301 no longer exists. Instead there is a web interface provided by
1302 security/greenbone-security-assistant or a command-line interface
1303 provided by security/openvas-cli.
1306 AFFECTS: print/hplip
1307 AUTHOR: tijl@FreeBSD.org
1309 HPLIP has been updated to verion 3.16.2. As part of the update support
1310 for the hpijs/foomatic-rip filter has been dropped. This has long been
1311 unsupported upstream. If you used this filter with your printer you'll
1312 have to remove the printer with HP Device Manager and then add it back as
1316 AFFECTS: print/cups-base, print/cups-client, print/cups-image
1317 AUTHOR: tijl@FreeBSD.org
1319 The cups-base, cups-client and cups-image packages have been combined
1320 into one cups package.
1322 If you build your own ports the easiest way to update is to delete these
1323 packages first and then build and install print/cups.
1325 If you are using binary packages, depending on the packages installed on
1326 your system, pkg(8)'s solver might get confused. In this case do not proceed
1327 with the upgrade but delete first the packages:
1329 pkg delete -fg "cups*"
1331 Then usual upgrade process: pkg upgrade
1333 The device URI of USB printers has changed so you have to adjust the
1334 printer configuration. Go to http://localhost:631/printers/. Click on
1335 your printer and select "Modify Printer" in the Administration drop-down.
1336 You should then be able to select the new URI of the printer. The web
1337 interface requires cookies and JavaScript to function properly so make
1338 sure your browser does not block them.
1340 The package also installs a devd(8) configuration file now that gives
1341 cups access to USB printers. Unless you have any special needs you can
1342 remove any devd(8), devfs.conf(5) or devfs.rules(5) configuration related
1343 to cups that you may have added in the past.
1346 AFFECTS: net-mgmt/yaf
1347 AUTHOR: pi@FreeBSD.org
1349 YAF is updated to version 2.8.1 with many new OPTIONS. Please use
1350 the default options to get same behavior as previous version.
1353 AFFECTS: audio/alsa-utils, www/firefox, www/firefox-esr, www/seamonkey
1354 AUTHOR: jbeich@FreeBSD.org
1356 ALSA backend in libcubeb as used by Firefox has an unresolved issue
1357 with the OSS patch in audio/alsa-plugins. To avoid excessive CPU
1358 usage when playing HTML5 videos rebuild the port with BUFSZ_P2
1359 option enabled or reset options to default.
1361 However, with BUFSZ_P2 enabled alsa-utils may crash:
1364 Playing WAVE 'test.wav' : Signed 16 bit Little Endian, Rate 48000 Hz, Stereo
1365 Assertion failed: (err >= 0), function set_params, file aplay.c, line 1289.
1366 Aborted by signal Abort trap...
1369 AFFECTS: users of security/openssh-portable-devel
1370 AUTHOR: bdrewery@FreeBSD.org
1372 openssh-portable-devel has been removed since it is stale, insecure and
1373 not worth maintaining any longer.
1375 Users should switch back to openssh-portable.
1379 # pkg delete openssh-portable-devel
1380 # pkg install openssh-portable
1384 # portmaster -o security/openssh-portable openssh-portable-devel
1388 # portupgrade -o security/openssh-portable security/openssh-portable-devel
1391 AFFECTS: users of mail/postfix
1392 AUTHOR: ohauer@FreeBSD.org
1394 Postfix has been updated to version 3.1, VDA and native SPF is no
1397 - if VDA support is needed, users should stay on mail/postfix211
1398 - SPF support can be added to postfix via one of the mail/*spf* ports
1400 The Dovecot SASL OPTION was removed, Dovecot SASL support is always given
1401 from now on. In addition, for each mail/postfix* port there is now a
1402 mail/postfix*-sasl slave port providing Cyrus SASL as default.
1404 To stay on postfix-2.11.x run the command:
1406 # pkg set -o mail/postfix:mail/postfix211
1409 AFFECTS: users of www/nginx-devel
1410 AUTHOR: osa@FreeBSD.org
1412 Dynamic modules support has been enabled for the following third-party
1413 modules, in case of usage of these modules please update nginx
1414 configuration file for load these modules:
1416 load_module "modules/ngx_dynamic_upstream_module.so";
1417 load_module "modules/ngx_http_small_light_module.so";
1420 AFFECTS: users of www/nginx-devel
1421 AUTHOR: osa@FreeBSD.org
1423 Dynamic modules support has been enabled for the following third-party
1424 modules, in case of usage of these modules please update nginx
1425 configuration file for load these modules:
1427 load_module "modules/ngx_http_echo_module.so";
1428 load_module "modules/ngx_http_headers_more_filter_module.so";
1429 load_module "modules/ngx_http_eval_module.so";
1430 load_module "modules/ngx_http_lua_module.so";
1431 load_module "modules/ngx_http_set_misc_module.so";
1434 AFFECTS: users of www/nginx-devel
1435 AUTHOR: osa@FreeBSD.org
1437 Dynamic modules support has been enabled. In case of usage following
1438 modules please update nginx configuration file for load these modules:
1440 load_module "modules/ngx_http_geoip_module.so";
1441 load_module "modules/ngx_http_image_filter_module.so";
1442 load_module "modules/ngx_http_xslt_filter_module.so";
1443 load_module "modules/ngx_mail_module.so";
1444 load_module "modules/ngx_stream_module.so";
1446 See https://www.nginx.com/blog/dynamic-modules-nginx-1-9-11/ for details.
1449 AFFECTS: users of net-im/uTox
1450 AUTHOR: amdmi3@FreeBSD.org
1452 Before upgrading uTox port, please set maximum font scale in the
1456 AFFECTS: users of security/tor, security/tor-devel
1457 AUTHOR: amdmi3@FreeBSD.org
1459 The tor ports now create /var/log/tor subdirectory for tor logs. If
1460 you've used /var/log/tor as a log _file_, you'll need to update your
1461 torrc and move the file before updating the port.
1464 AFFECTS: users of mail/rspamd and mail/rmilter
1465 AUTHOR: vsevolod@FreeBSD.org
1467 Rspamd has been updated to the version 1.1.0. If you have used per user
1468 statistics, then please consult changelog for details: your configuration
1471 Rmilter has been updated to the version 1.7.0. Support of SPF and Spamassassin
1472 has been dropped from this project completely. You might also consider
1473 migration from memcahched to redis in this version.
1476 AFFECTS: users of sysutils/ansible
1477 AUTHOR: lifanov@mail.lifanov.com
1479 Ansible 2.0.0 introduces a number of incompatible configuration changes.
1480 Please read changelog and migrate current configuration:
1482 https://raw.githubusercontent.com/ansible/ansible/v2.0.0.0-1/CHANGELOG.md
1484 Ansible 1.9.* will be provided as sysutils/ansible1 until the next update
1488 AFFECTS: users of security/easy-rsa
1489 AUTHOR: mandree@FreeBSD.org
1491 The port has been upgraded to version 3. This incurs major changes,
1492 please see ${PREFIX}/share/doc/easy-rsa/doc/EasyRSA-Upgrade-Notes.md
1495 The old version 2.2.2 has been retained as security/easy-rsa2.